CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager버전 사용법 CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

CVE-2025-69212

CVE-2025-69212：OpenSTAManager の P7M ファイル処理における OS コマンドインジェクション 概要 フィールド| 詳細 ---|--- CVE ID| CVE-2025-69212 重要度| CRITICAL アドバイザリ| アドバイザリを表示 発見者| Lukasz Rybak 影響を受ける製品 devcode-it/openstamanager （バージョン: = 2.9.8） CWE 分類 CWE-78: OS コマンドに使用される特殊要素の不適切な無害化（'OS コマンドインジェクション'） 詳細 要約 P7M（署名付き...

CVE-2025-69212_PoC

CVE-2025-69212: OpenSTAManager Proof of Concept PoC This repository contains a Proof of Concept PoC demonstrating the vulnerability identified as CVE-2025-69212 within OpenSTAManager, an OS Command Injection vulnerability caused by the P7M signed XML file decoding functionality. The versions...

CVE-2025-69212

CVE-2025-69212 설명 OpenSTAManager는 기술 지원, 전자 송장 발행 및 회계를 위한 관리 소프트웨어 솔루션입니다. =2.9.8 버전은 인증된 원격 코드 실행 취약점에 영향을 받습니다. 공격자는 특수하게 조작된 .zip 아카이브를 업로드하여 파일 이름이 셸 명령으로 해석될 수 있는 .p7m 파일을 포함시킴으로써 이 취약점을 악용할 수 있으며, 이로 인해 원격 서버에서 임의의 명령이 실행됩니다. 사용법 요구 사항 $ pip install requests 개념 증명 사용법 $ python3 exploit.py ...

CVE-2025-69212-PoC

CVE-2025-69212 OpenSTAManager = 2.9.8 — OS Command Injection in P7M File Processing Overview Field| Details ---|--- CVE ID| CVE-2025-69212 Severity| CRITICAL CVSS 4.0: 9.4 CWE| CWE-78: OS Command Injection Affected Versions| OpenSTAManager = 2.9.8 Vulnerable Function| XML::decodeP7M in...

CVE-2025-69212-Exploit

CVE-2025-69212 - OpenSTAManager P7M 명령 주입 익스플로잇 CVE-2025-69212 용 완전 자동화 익스플로잇 스크립트로, OpenSTAManager의 명령 주입 취약점입니다. 이 스크립트는 관리자 자격 증명으로 인증한 후, ZIP 아카이브에 포함된 조작된 P7M 파일을 통해 악성 PHP 웹 셸을 배포하고, 명령 실행 또는 리버스 셸을 제공합니다. 기능 자동 인증. 악성 ZIP 생성 및 업로드 invoice.p7m 주입. 특수 문자 문제 방지를 위한 Base64 명령 래핑. 리버스 셸 및 단일 명령...

Exploit for OS Command Injection in Devcode Openstamanager

CVE-2025-69212 - OpenSTAManager P7M Command Injection Exploit...

Exploit for OS Command Injection in Devcode Openstamanager

OpenSTA-Exploit --- About CVE-2025-...

Exploit for CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS Command Injection RCE Pr...

CVE-2025-69212

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

CVE-2025-69212

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

CVE-2025-69212

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

EUVD-2025-206884

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...

Command Injection

Overview devcode-it/openstamanager is a management software for technical assistance and electronic invoicing Affected versions of this package are vulnerable to Command Injection via the decodeP7M function. An attacker can execute arbitrary system commands on the server by uploading a ZIP archiv...

CVE-2025-69212: Improper Neutralization of Special Elements used in an OS Command

OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M signed XML file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a...